Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/781ef5a5-22a1-3333-9e99-8e6caaeac1e9.roa
File:                     781ef5a5-22a1-3333-9e99-8e6caaeac1e9.roa (raw, json)
Hash identifier:          /eATLZL4aiO7l6iqN0R95AehD39836QiujQIY5cqQ8A=
Subject key identifier:   D0:50:3F:42:CA:EE:41:9C:12:4D:B7:00:78:85:D5:EE:E1:4C:DC:DB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B06B5D31E879A2D186B75440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/781ef5a5-22a1-3333-9e99-8e6caaeac1e9.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        13.52.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b0:6b:5d:31:e8:79:a2:d1:86:b7:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=f6453065-6bc8-4a75-a501-5eab6e56c53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:1c:7b:dd:fd:e2:db:50:c9:ba:b4:f8:e4:
                    68:b3:81:29:b5:6a:c9:18:04:5d:6d:d2:5b:7c:8e:
                    44:cf:8a:15:25:10:1d:9c:7e:c8:4c:1d:d8:a2:67:
                    88:7f:11:6f:9c:66:4f:c9:81:b2:9d:5b:36:da:78:
                    3e:66:e0:fe:64:35:dd:5d:66:11:09:b0:75:20:65:
                    c6:0e:fb:5f:66:7f:e6:f3:96:c7:ee:d4:03:16:ec:
                    93:38:39:79:6d:b7:5e:29:20:94:96:fa:1e:74:df:
                    6a:cd:11:7a:f3:a0:98:f9:e9:22:a6:3c:3f:77:1f:
                    6b:96:1c:82:42:df:d9:d3:e7:2b:d7:6d:42:78:32:
                    21:d2:38:c1:e3:fe:bc:a8:87:db:12:95:b8:49:3b:
                    a2:b3:7b:74:56:f7:c4:03:39:ea:84:a2:14:ce:98:
                    38:9c:38:84:15:99:99:16:bb:cb:48:38:f5:9e:35:
                    42:d1:0d:13:01:a0:44:6e:ac:15:24:09:56:3a:5f:
                    19:1f:d0:10:25:d4:aa:ac:61:ca:0d:30:af:f8:7a:
                    9d:f9:a6:77:e6:9a:76:19:4b:c3:d2:28:f5:62:56:
                    2a:d3:7c:ff:0a:2a:f1:d4:4c:8e:85:e1:e3:5b:a3:
                    a1:a1:20:ab:62:8d:14:bb:f7:70:c2:75:08:48:76:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:50:3F:42:CA:EE:41:9C:12:4D:B7:00:78:85:D5:EE:E1:4C:DC:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/781ef5a5-22a1-3333-9e99-8e6caaeac1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.52.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:52:14:39:53:c3:76:1b:1a:13:42:c7:21:20:30:3e:3b:cd:
         53:07:21:40:f1:2c:36:b9:2a:52:a0:ef:f7:44:23:5c:c4:08:
         4a:ca:0c:c2:21:c8:9a:eb:3a:0c:b2:b5:e7:a4:47:a5:62:ba:
         b9:38:82:1a:75:da:e0:c4:65:2a:12:84:3e:32:80:6f:b3:c9:
         6d:73:cc:8d:e7:56:34:f5:2e:94:8c:cc:f9:4e:a3:1c:a6:71:
         91:f7:f5:13:af:bf:dd:51:af:9b:25:23:52:8e:28:cc:15:95:
         56:cd:7f:95:6d:6a:cb:6b:4a:a5:63:a1:c9:e3:3b:8d:fe:89:
         a8:64:3d:3c:4d:f4:7a:c2:92:4c:db:77:e2:1a:e8:62:b1:96:
         77:17:7c:1e:a9:2b:a4:97:97:e0:ac:39:3a:4f:06:97:64:7d:
         64:13:79:ce:2e:ca:fd:21:02:ba:e3:b1:01:d1:10:08:79:8c:
         95:1e:53:e5:c9:cc:ee:60:0a:b3:ec:5c:4b:41:8e:5e:d6:16:
         d6:73:a0:3d:3a:30:48:5c:d0:24:37:07:3a:de:eb:1a:13:eb:
         89:fd:6d:20:06:4b:47:a6:b0:28:4d:61:af:cd:76:80:a3:3a:
         36:47:e8:53:53:f6:02:3e:73:71:a3:f7:07:47:e9:3f:eb:23:
         b6:83:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----